krateoplatformops / krateo-module-core

Apache License 2.0
3 stars 1 forks source link

Kong Proxy Service not reachable from outside with Kubernetes AKS 1.24.6 #2

Closed R3DRUN3 closed 1 year ago

R3DRUN3 commented 1 year ago

After I installed Krateo on AKS (v1.24.6) I was not able to reach Krateo Web Portal trough Kong Load Balancer. This issue is basically the same as this one.

I was able to bypass the issue with the following steps:

  1. Retrieve the LoadBalancer manifest and save it in a yaml file:

    kubectl -n krateo-system get svc $(kubectl get services -n krateo-system | grep 'LoadBalancer' | awk '{print $1}') -o yaml > kong-svc.yaml
  2. Open kong-svc.yaml and delete the "appProtocol" properties in the specs for example this:

    spec:
    type: LoadBalancer
    ports:
    - name: kong-proxy
    port: 80
    targetPort: 8000
    appProtocol: http
    protocol: TCP
    - name: kong-proxy-tls
    port: 443
    targetPort: 8443
    appProtocol: https
    protocol: TCP 

    becomes this:

    spec:
    type: LoadBalancer
    ports:
    - name: kong-proxy
    port: 80
    targetPort: 8000
    protocol: TCP
    - name: kong-proxy-tls
    port: 443
    targetPort: 8443
    protocol: TCP 
  3. Save and apply the new manifest:

    kubectl apply -f kong-svc.yaml

Note: Kong seems to have fixed this problem (PR merge in main), this should be solved in the next helm chart release

braghettos commented 1 year ago

@R3DRUN3 the issue was related to a wrong behavior in the Kong helm chart version we were using. The issue has been resolved upstream (https://github.com/Kong/charts/pull/705) and we are leveraging now Kong helm chart version 2.15.2. I made a test on a AKS cluster and everything's working correctly. Closing this issue.